Fwd: Dropping packet maximum number of childs

"Bert Colemont" <[email protected]> Mon, 5 Jan 2009 15:43:39 +0100
Newsgroups gmane.comp.gnu.radius.bugs
Message-ID <[email protected]>
--===============1453476240==
Content-Type: multipart/alternative; 
	boundary="----=_Part_128990_24719656.1231166619605"

------=_Part_128990_24719656.1231166619605
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello Sergey,

We use a SQL server (separated machine)

the config file looks like this :

# For detailed description, run:
#       info Radius config

option {
        radiusd-user radius;
        max-requests 1024;
        resolve no;
};


logging {
        prefix-hook "default_log_prefix";
        channel default {
                file "radius.log";
                print-category yes;
                print-level yes;
        };
        category auth {
                print-auth yes;
                print-failed-pass yes;
                channel default;
        };
        category info {
                channel default;
        };
        category debug {
                channel default;
                #level radiusd=1,files,sql=99,auth,input;
        };
        category * {
                channel default;
        };
};


auth {
        listen 193.109.184.73:1812,193.109.184.74:1812,192.168.3.2:1812;
        max-requests 127;
        request-cleanup-delay 2;
        detail yes;
        strip-names yes;
        checkrad-assume-logged yes;
};

acct {
        listen 193.109.184.73:1813,193.109.184.74:1813,192.168.3.2:1813;
        max-requests 127;
        request-cleanup-delay 2;
};

rewrite {
        load "checknas.rw";
        load "log-hook.rw";
};

# snmp {
#       listen no;
# };


our radius.log file is filled with

Jan 05 11:40:33 Auth.notice: (Access-Request 172.28.3.158 27 "dsl28543"
CLID=*BAS-ANTWERPEN*19/0*247*487): Dropping packet: Maximum number of
children active
Jan 05 11:40:33 Auth.notice: (Access-Request 172.28.192.233 11 "dsl35220"
CLID=*MSR02MAR1*13/1*213*84): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.158 3 "dsl29126"
CLID=*BAS-ANTWERPEN*21/1*242*304): Dropping packet: Maximum number of
children active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.190 2 "dsl37161"
CLID=*BAS-LEUVEN*21/1*245*386): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.10 2 "dsl31163"
CLID=*BAS-ROGIER*27/1*241*1846): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Auth.notice: (Access-Request 172.28.3.10 96 "dsl31163"
CLID=*BAS-ROGIER*27/1*241*1846): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.182 8 "dsl43156"
CLID=*BAS-HASSELT*23/0*210*372): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.158 5 "dsl31350"
CLID=*BAS-ANTWERPEN*27/1*29*377): Dropping packet: Maximum number of
children active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.158 9 "dsl43067"
CLID=*BAS-ANTWERPEN*19/0*246*421): Dropping packet: Maximum number of
children active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.198 40 "dsl30089"
CLID=*BAS-LIEGE*23/1*217*128): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.18.98 3 "dsl43597"
CLID=*BAS-BERCHEM*23/1*204*898): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Auth.notice: (Access-Request 172.28.192.234 30 "dsl20464"
CLID=*MSR02STR1*14/1*248*99): Dropping packet: Maximum number of children
active
Jan 05 11:40:34 Auth.notice: (Access-Request 172.28.192.238 26 "dsl45173"
CLID=*MSR11HAS1*13/1*225*310): Dropping packet: Maximum number of children
active
Jan 05 11:40:35 Auth.notice: (Access-Request 172.28.192.240 2 "dsl18008"
CLID=*MSR15MES1*11/1*229*1305): Dropping packet: Maximum number of children
active
Jan 05 11:40:35 Acct.notice: (Accounting-Request 172.28.3.10 8 "dsl31163"
CLID=*BAS-ROGIER*27/1*241*1846): Dropping packet: Maximum number of children
active


on a previous machine running on CentOS with kernel 2.4.25 running with gnu
radius 1.2 has never got the problem.

This machine is a CentOS 5.2 with gnu radius 1.4 or 1.5 (tried both)

Hope you can help me?







2009/1/3 Sergey Poznyakoff <[email protected]>

Bert Colemont <[email protected]> ha escrit:
>
> >    Now frequently the machine gets a load of 20, of radiusd, and in the
> >    log the message : Dropping packet : Maximum number of children active
>
> There is not enough information to correctly diagnose your problem:
>
> 1. What is your configuration? In particular, files radd/config, users.
> hints, huntgroups. If you use SQL, then raddb/sqlserver also.
> 2. What command options are used when starting daemon?
> 2. What do you get in your logs?
>
> Regards,
> Sergey
>

------=_Part_128990_24719656.1231166619605
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<br><div class="gmail_quote">Hello Sergey,<br><br>We use a SQL server (separated machine)<br><br>the config file looks like this :<br><br># For detailed description, run:<br>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; info Radius config<br><br>option {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; radiusd-user radius;<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; max-requests 1024;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; resolve no;<br>};<br><br><br>logging {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; prefix-hook &quot;default_log_prefix&quot;;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; channel default {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; file &quot;radius.log&quot;;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; print-category yes;<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; print-level yes;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; category auth {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; print-auth yes;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; print-failed-pass yes;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; channel default;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; category info {<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; channel default;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; category debug {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; channel default;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #level radiusd=1,files,sql=99,auth,input;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; category * {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; channel default;<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<br>};<br><br><br>auth {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; listen <a href="http://193.109.184.73:1812" target="_blank">193.109.184.73:1812</a>,<a href="http://193.109.184.74:1812" target="_blank">193.109.184.74:1812</a>,<a href="http://192.168.3.2:1812" target="_blank">192.168.3.2:1812</a>;<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; max-requests 127;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; request-cleanup-delay 2;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; detail yes;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; strip-names yes;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; checkrad-assume-logged yes;<br>};<br><br>acct {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; listen <a href="http://193.109.184.73:1813" target="_blank">193.109.184.73:1813</a>,<a href="http://193.109.184.74:1813" target="_blank">193.109.184.74:1813</a>,<a href="http://192.168.3.2:1813" target="_blank">192.168.3.2:1813</a>;<br>

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; max-requests 127;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; request-cleanup-delay 2;<br>};<br><br>rewrite {<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; load &quot;<a href="http://checknas.rw" target="_blank">checknas.rw</a>&quot;;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; load &quot;<a href="http://log-hook.rw" target="_blank">log-hook.rw</a>&quot;;<br>

};<br><br># snmp {<br>#&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; listen no;<br># };<br><br><br>our radius.log file is filled with<br><br>Jan 05 11:40:33 Auth.notice: (Access-Request 172.28.3.158 27 &quot;dsl28543&quot; CLID=*BAS-ANTWERPEN*19/0*247*487): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:33 Auth.notice: (Access-Request 172.28.192.233 11 &quot;dsl35220&quot; CLID=*MSR02MAR1*13/1*213*84): Dropping packet: Maximum number of children active<br>Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.158 3 &quot;dsl29126&quot; CLID=*BAS-ANTWERPEN*21/1*242*304): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.190 2 &quot;dsl37161&quot; CLID=*BAS-LEUVEN*21/1*245*386): Dropping packet: Maximum number of children active<br>Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.10 2 &quot;dsl31163&quot; CLID=*BAS-ROGIER*27/1*241*1846): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:34 Auth.notice: (Access-Request 172.28.3.10 96 &quot;dsl31163&quot; CLID=*BAS-ROGIER*27/1*241*1846): Dropping packet: Maximum number of children active<br>Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.182 8 &quot;dsl43156&quot; CLID=*BAS-HASSELT*23/0*210*372): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.158 5 &quot;dsl31350&quot; CLID=*BAS-ANTWERPEN*27/1*29*377): Dropping packet: Maximum number of children active<br>Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.158 9 &quot;dsl43067&quot; CLID=*BAS-ANTWERPEN*19/0*246*421): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.3.198 40 &quot;dsl30089&quot; CLID=*BAS-LIEGE*23/1*217*128): Dropping packet: Maximum number of children active<br>Jan 05 11:40:34 Acct.notice: (Accounting-Request 172.28.18.98 3 &quot;dsl43597&quot; CLID=*BAS-BERCHEM*23/1*204*898): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:34 Auth.notice: (Access-Request 172.28.192.234 30 &quot;dsl20464&quot; CLID=*MSR02STR1*14/1*248*99): Dropping packet: Maximum number of children active<br>Jan 05 11:40:34 Auth.notice: (Access-Request 172.28.192.238 26 &quot;dsl45173&quot; CLID=*MSR11HAS1*13/1*225*310): Dropping packet: Maximum number of children active<br>

Jan 05 11:40:35 Auth.notice: (Access-Request 172.28.192.240 2 &quot;dsl18008&quot; CLID=*MSR15MES1*11/1*229*1305): Dropping packet: Maximum number of children active<br>Jan 05 11:40:35 Acct.notice: (Accounting-Request 172.28.3.10 8 &quot;dsl31163&quot; CLID=*BAS-ROGIER*27/1*241*1846): Dropping packet: Maximum number of children active<br>

<br><br>on a previous machine running on CentOS with kernel 2.4.25 running with gnu radius 1.2 has never got the problem.<br><br>This machine is a CentOS 5.2 with gnu radius 1.4 or 1.5 (tried both)<br><br>Hope you can help me?<br>

<br><br><br><br><br><br><br><div class="gmail_quote">2009/1/3 Sergey Poznyakoff <span dir="ltr">&lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt;</span><div><div></div><div class="Wj3C7c"><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">

Bert Colemont &lt;<a href="mailto:[email protected]" target="_blank">[email protected]</a>&gt; ha escrit:<br>
<div><br>
&gt; &nbsp; &nbsp;Now frequently the machine gets a load of 20, of radiusd, and in the<br>
&gt; &nbsp; &nbsp;log the message : Dropping packet : Maximum number of children active<br>
<br>
</div>There is not enough information to correctly diagnose your problem:<br>
<br>
1. What is your configuration? In particular, files radd/config, users.<br>
hints, huntgroups. If you use SQL, then raddb/sqlserver also.<br>
2. What command options are used when starting daemon?<br>
2. What do you get in your logs?<br>
<br>
Regards,<br>
<font color="#888888">Sergey<br>
</font></blockquote></div></div></div><br>
</div><br>

------=_Part_128990_24719656.1231166619605--



--===============1453476240==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Bug-gnu-radius mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/bug-gnu-radius

--===============1453476240==--